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VMCS revision identifier 

VMCS DDDDDDDDDDDDDDDDDDD VT-x DDDDDDDD CPU Q D D D CPU Q Q VMCS 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
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DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD Intel CPU D D VMCS D D D D 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

VMCS-abort indicator 

VMExit DDDDDDDDDDDDD VMExit DDDDDDDDD VMCS DDDDDDDDDDDDDDD 
DDDDDDDDDDDDDm VMExit DDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

VMCS data 

VMCS DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
Guest-state area 

VMExit DDDDDDDDDDDDDDD VMEntry DDDDDDDDDDDDDDDDDDDDDDDD 
D D D 

• CRO 

• CR3 

• CR4 

• DR7 

• RSP 

• RIP 

• RFLAGS 

• CS 

• ss 

• DS 

• ES 

• FS 

• GS 

• LDTR 

• TR 

• GDTR 

• SMBASE 

D D D D D D MSRD DDDDDDDDDD 

• IA32_DEBUGCTL 
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• IA32_SYSENTER_CS 

• IA32_SYSENTER_ESP 

• IA32_SYSENTER_EIP 

• IA32_PERF_GLOBAL_CTRL 

• IA32_PAT 

• IA32_EFER 

DDDDDDDDDDDDDDDDDDDDD CPU DDDDDDDDDDDDDDDDDDDDDDDDD 
D D D D D D VMX DDDDDDDDDDDDDDDDD EPT q PTE DDDDDDDDDDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
Host-state area 

VMEntry DDDDDDDDDDDDDDDDDDD VMExit DDDDDDDDDDDDDDDDDDD D 
DDDDDDDDDDD 

• CRO 

• CR3 

• CR4 

• RSP 

• RIP 

• cs 

• ss 

• DS 

• ES 

• FS 

• GS 

• LDTR 

• TR 

• GDTR 

D D D D D D MSRD DDDDDDDDDDDDDDDD 

• IA32_SYSENTER_CS 

• IA32_SYSENTER_ESP 

• IA32_SYSENTER_EIP 

• IA32_PERF_GLOBAL_CTRL 

• IA32_PAT 
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• IA32_EFER 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
VM-execution control fields 

DDDDDDDDDD CPU DDDDDDDDDDDDDDDDDDDDDD VMExit DDDDDDDDD 
DDDDDDDDDDDDD VMExit DDDDDDDDDDDDDD EPTQ DDDDDDDDDDDDDD 
D D D D D EPT DDDDDDDD Local APIC D D D D VPID DDDDDDDDDDDD 

VM-exit control fields 

VMExit D D CPU DDDDDDDDDDDDDDDDDDDDD VMExit 0 D D D D CPU D D D D D D 
D D D D MSR DDDDDDDDDDDDDDDDDDDDDDDDDD 64 DDDDDDDDDDDDDD 
D D D D D 

VM-entry control fields 

VMEntry q D CPU DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD MSR D 
DDDDDDDDDDDDDDDDDDDD 64bit DDDDDDDDDDDDDDDDDDD 

VM-exit information fields 

VMExit D D exit DDDDDDDDDDDD 

VMExit D D 

VT-x DDDDD 1DDDDDDDDD VMExit DDDDDDDDDDDDDDDDDDDDD VMExit 
DDDDDDDDDDD VMCS D D D VM-execution control fieldsD DDDDDDDDDDD VMCS Q Q 
D VM-exit information fieldsD DDDDDDDDD 

DDDD VMExit DD 

• D D D NMI D D D D D D D 
•DDDDDDDDD 
•DDDDDDDDD 

• INIT D D D D D D D 

• SIPI D D D 
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• SMI D D D 
•DDDDDDDDD 
•DDDDDDD 

• CPUID D D D D D 

• Intel SMX DDDDDDDD 

• HLT D D D D D 

•DDDDDDDDDDDDDD INVD, WBINVDQ 

• TLB DDDDDDDDD HNVLPG, INVPCIDD 
•I/O DDDDDDDDD INB.OUTB D D D 
•DDDDDDDDDDDDDDDDDDDDDDDDDD RDPMCD 
•DDDDDDDDDDDDDDDDDDDD RDTSCD 

• SMM DDDDDDDDD RSMD 

• VT-x DDDDDDDDDD 
•DDDDDDDDDDDDDDDD 
•DDDDDDDDDDDDDDDDDD 
•DDDDDDDDDDDDDD 

• MSR D D D D D D 

• MONITOR/MWAIT D D D D D 

• PAUSE D D D D D 

• APIC DDDDDDDDDD 

• GDTRD IDTRD LDTRD TR DDDDDDDDDD 

• VMX DDDDDDDDDDDDDDDDDD 

• RDRAND D D D D D 



VT-x DDDDDDD 

DDDDDDDDD VT-x DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
VMCALL D VMFUNC DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDD ("Intel(R) 64 and IA-32 Architectures Software Developer Manuals") D D D D D D 
D D D D 



VMCS DDDDDDDDD 

VMCS DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD VMRE AD /VM WRITE D D D 
DDDDDDDDDDDDDDDDDDDDDDDD VMPTRLD D VMCS DDDDDDDDD VMCLEAR 
D D D D D VMWRITE DDDDDDDDDDDDDDDDDD VMEntry D D D D D D 
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VT-x D D D D 

DDDDDDDDDDDD VT-xQ DDDDDDDDDDDDDDDD VMXONQ D DDDDDDDDDDD 

VMX non Root Mode Q VMEntry DDDDDDDD VMEntry Q D D D D D VMLAUNCHQ Q Q VMExit 

DDDDDDDDD VMRESUME D D D D D D 
DDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDD EPT DDDDDDDDDDDDDDDDDD EPTQ DDDDDDDDDD 
DDDDDDDDDDD EPT DDDDDDDDDDD 

DDDDDDDDDDDDD 

DDDDDDDDDDDDDDDDDOSDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

DDDDDDDDDDD CPU DDDDDDDDDDDDDDDDDD MMUD DDDDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDx86 DDDDDDDDDDDDD 4KBQ DDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD2H] 

CPU DDDDDDDDDDDDDDDDD MMU DDDDDDDDDDDDDDDDDDDDDDDDDD 
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0 2 nnnnnnn 



DDDDDDDDDD AQ ID D 4DDDDDDDD B Q 5 D D 8DDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDD 1DDDDDDDDDDDDDDDDDDDDD ADDDDDDDD 
DDD 1DDDDDDD BDDDDDDDDDDD 5DDDDDDDDDDDDDDDDDDDD 3QD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
D D D D EPTQ D 2DDDDDDDD 



x86DDDDDDDDDDDDDDDDDD 

DDDx86DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDx86DDDDD 
DDDD 1DDDDDDDD 4KB D D D D D D 32bit DDDDDDDDDDD 1,048,576 DDDDDDDDD 
DDDDDDDDDDDDD2DDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

DDDDx86DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDD1DDDDDDDDDD 1024 DDDDDDD1DDDDD 
DDDDD 4MB DDDDDDDDDDDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDD 1024 D D D D D D D 4GB DDDDDDDDDDDDDDDDDDDD 4Q] 

64bit DDDDDDD 8DDDDDDDDDDDDDDDDDDDDDDD 512DDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDD 4DDDDD 2DDDDDDD 256TB D D D D D D 
DDDDDDDDDDDD* 2 DD 5DD 



32bit pae □□□□□□□ 64bit □□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□ 
□ □ 
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CR3 



31 22 21 12 


11 0 


Directory 


Table 


Offset 



4MB* 1024 



4KB* 1024 



Page 




Page 


Directory 




Table 





Physical 
Page 




D4 DDDDDDDDDDDDD2DDD 



47 



3938 



3029 



21 20 



512GB* 512 



CR3 



Page Map 
Level 4 



12 11 



PML4 


Directory Ptr 


Directory 


Table 


Offset 
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it 
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1GB*512 

Page 
Directory 
Pointer 



Page 
Directory 
Pointer 



2MB* 512 



Page 
Table 



Page 
Table 



Page 
Table 



4KB* 512 



Page 
Table 



Page 
Table 



Page 
Table 



4KB 



Page 




Page 
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Physical 


Directory 
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Page 



Physical 
Page 



Physical 
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Physical 
Page 
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•DDDDDDDD 1DDDDDDDDDDDD0DDDDDDDDDDD 

•DDDDDDDDD ODDDDDDDDDDDDDDDDDDDDDDD 

•DDDDDDDDDDDDDD ODD Ring3 DDDDDDDD 

•DDDDDDDDDDDD ODDDDDDDDD1DDDDDDDD 

•DDDDDDDDDDDDDDDDDD 1DDDDDDDDD 

•DDDDDDD DDDDDDDDDDDD CPU Q 1 D D D 

•DDDDDDDD DDDDDDDDDDD CPU D 1 D D D 

• PAT D D D DDDD PAT D D D D D D 

•DDDDDDDD 1DDDDDDDDDDDD TLB DDDDDDDD 

•DDDDDDDD 20 DDDD DDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDD 

64bit DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 64bit DDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

DDDDDDDDDDDDDDDODDDDDDDDDDDDDDDDDDDDDD CPU DDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

DDDDDDDDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDD ODDDDDDDDDDDDDDDDDDDDDDDDDDDD 1DDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD ("Intel(R) 
64 and IA-32 Architectures Software Developer Manuals") Q Chapter 4. Paging DDDDDDDDDD 

DDDDDDDDD 

DDDOSDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
CPU D CR3 DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD CPU D CR3 DDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDD 6m 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD OS DDDDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDD 
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D6 DDDDDDDDn 



EPT 

Nehalem Q D D Intel D CPU DDDDDDDDDD CPU DDDDDDDDDDD EPTQ D D D D D D D 
0 D EPT DDDDDDDDDDDDDDDD 64bit DDDDDDDDDDDDDDDD 4QDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD VMCS D VM 
Execution control field ODD Extended Page Table PointerO EPTPQ DDDDDDDDDD 4DDDDD 
DDDDDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD CR3 DDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDD EPTP DDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDD 7m 

DDDDDDDDDDDDDD CR3 DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDD VMExit DDDDDDDDDDDDDDDDDDDDD EPT D 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDD* 3 D 



□ □□□□□□□□□□□□□□ 30 □□□□□□□□□□□□□□□□□ 
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D7 000000000000000000000000 



EPT DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 



VPID 



D D EPT DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD EPT D D D 

D Nehalem D D D Intel D CPU D D D D D D D VPIDD Virtual Processor IdentifierDD D D D D D D D 

DDDDDDDDDDDDDDD CPU DDDDDDDDDDDDDDDDDDDDD TLB D D D D D D D 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD CAMQ D D D D D D 
DDDDDDDDDDDDDDDDDDDDDDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD 

D D D D D D D VMExit DDDDDOSQDDDDDDDDDDDDDDDDDDDDDDDDDD TLB Q 
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD VT-x q q CPU 
D D VMEntry Q D VMExit Q D TLB DDDDDDDDDDDDDDDDDDDD 

Nehalem Q D D Intel Q CPU DDDDDDDDDDDDDDDDDDDDDDDDDDD VPID Q D D D D 
D D D D VPID DDDDDDDDD VMCS Q VM Execution control field ODD VPID DDDDDDDDD 
DDDDDDDDDDD IDDDDDDDD 

VPID D D D D D D VMEntry Q Q VMExit q q INVVPID DDDDDDDDDDDDDDDDDDDDD 
DDDDDD TLB DDDDDDDDDDDDDDDDDD 
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DDD 

DDDDDDDDDDDDDDDDDDDDDDDDDDDDD VMCS Q VT-x DDDDDDDDDDDD 
DDDDDDDDDDDDDDDDDDDD 

DDDDI/ODDDDDDDDDDDDDDD 

D D 

DDDDDDDDDDDDDDDDD DDDDDDD DDDDDDDDDDDDD DDDDDDDDDDD 
D D D D D 



D □ □ D D 

Copyright (c) 2014 Takuya ASADA. DDDDDDDD DDDDDDDDDDDDD DD - DD 4.0 D D 
DDDDDDDDDDDDDDDDD 

D D D D 

"Intel(R) 64 and IA-32 Architectures Software Developer Manuals." http://www.intel.com/content/www/us/en/processoi 
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